André Jaenisch

A security researcher known by the nickname percidae has drawn my attention to the Angular compilations. By bundling a single page application without code splitting, SPAs can make the job for penetration testers easier.

This talk will look into an Angular app and highlight areas, where means for performance optimisation can lead to a more secure app. At the end of the presentation you should have a good understanding about how to read a webpack compilation for a SPA. You will know where to look for your own code and what webpack pulls in in addition.

Other SPA frameworks could be affected as well, but are out of scope given the time constraint of this presentation.

Subtitles will be provided after the event as .srt if I can find the time. Otherwise I encourage you to contact me and I'll send them. Accessibility is a human right.

In 2021 we saw several security incidents. Looking closer at it, some patterns emerge, that could help prevent them in the future.

In this talk, you will learn about some precautions you can take for your code, but also what you can do in your team, your company or as part of a community. Thinking about code as a communication medium means, we also should look at the people to prevent security incidents.

You will get practical tips that you can realise today. There are also some recommendations you should bring up in your team to help you stay safer in the future.

Since there is so much to talk about, the slides are designed as choose-your-own-adventure, but the presentation itself is following a single path.

For years now, we associate Responsive Web Design with Media Queries which adapt to the width of the device we are using. But what if we can take this one step further? Modern devices are brimful of sensors. The fun thing? There are JavaScript and CSS APIs which allow access to some of them! This talk will introduce you to some lesser known Web APIs and give examples on how you can progressively enhance your design with sensor input!

When I did some research for hackathons, I noticed on MDN Web Docs, that there are APIs for device sensors, that rarely get used.

The devicemotion and deviceorientation API might be known from Firefox OS days. But you can also use Ambient Light, Voice, Colours, Pointer devices, NFC or Bluetooth - if the device supports it.

This talk is using a Fairphone 3+ as mobile device to demonstrate some of those APIs. Part of them are available on Firefox, others on Chrome. You might need to toggle some flags to enable them. This means, it's not production ready yet - but you can build interesting demos to convince browser vendors to refine the APIs for production!

An idea might be to adjust the contrast or font to the environment you are. Or the position you are in. Or the devices which could be detected around you.

Eleventy isn't the first Static Site Generator in Node.js out there. But it gets amazing feedback from different parties. Time to look into what makes it so compelling! We'll touch Setup, Data Directory Files and Template Languages. You'll see, that you have plenty of options to choose from.

Eleventy gained the hearts of the community by storm. But what makes it compelling?

This talk will give you a round about the origin, the people behind it, show you what you can build and how you can help.

You can pick from Liquid, Nunjucks, Haml, Pug, EJS, Handlebars or Mustache or go with plain JavaScript template strings. Data Directories allow for abstracting away recurring frontmatter elements. They can even be leveraged to build entire pages from! Also, you can query an API endpoint and provide the results as Data to your templates.

The build and deploy process can happen whereever you like.